Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-7863

thinkgem JeeSite ServletUtils.java redirectUrl

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic. Affected by this issue is the function redirectUrl of the file src/main/java/com/jeesite/common/web/http/ServletUtils.java. The manipulation of the argument url leads to open redirect. The attack may be launched remotely. The name of the patch is 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

thinkgem JeeSite

  • 5.0affected
  • 5.1affected
  • 5.2affected
  • 5.3affected
  • 5.4affected
  • 5.5affected
  • 5.6affected
  • 5.7affected
  • 5.8affected
  • 5.9affected
  • 5.10affected
  • 5.11affected
  • 5.12.0affected

References